Register Login

sloganpng

top title background image

CEsezvn5.exe

Status: finished

Submission Time: 2020-09-15 15:13:15 +02:00

Malicious

Trojan

Evader

Nanocore

Comments

Tags

Details

Analysis ID:
285723
API (Web) ID:
466574
Analysis Started:

2020-09-15 15:50:18 +02:00
Analysis Finished:

2020-09-15 15:59:29 +02:00
MD5:
6d5aa4c20470b9cb865a8e2feacda571
SHA1:
287f44407fc1495b9a41262d82c6d8ef9e08e4f7
SHA256:
e526eb649ee6c8fe974afbd1fcd3ed6a8e27d6fb27b3ba96185d8ab0d8327b42
Technologies:

Engines
IOCs

Joe Sandbox

Engine	Download Report	Detection	Info
		malicious
	Full Report Management Report IOC Report	malicious Score: 100	System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

Open Full Report

malicious

Score: 58/67

malicious

Score: 28/29

malicious

IPs

IP	Country	Detection
194.5.97.98	Netherlands

Domains

Name	IP	Detection
getmoney3004.duckdns.org	194.5.97.98

Dropped files

Name	File Type	Hashes	Detection
C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows	#
C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe:Zone.Identifier	ASCII text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\dhcpmon.exe.log	ASCII text, with CRLF line terminators	#
Click to see the 1 hidden entries
C:\Users\user\AppData\Roaming\D06ED635-68F6-4E9A-955C-4899F5F57B9A\run.dat	data	#